This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: MwCMX9uTUDYBJPnaQmDpfcmvyYSaqTHl++DZTsmAjZM= Subject key identifier: 25:A8:E4:3E:DC:00:A9:1B:14:5B:DE:58:1E:DC:DD:86:F1:6C:53:9F Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 0B3E85D9DCC6005BEF9210134EA292D181692A0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 034E Signing time: Thu 04 Dec 2025 15:00:54 +0000 Manifest this update: Thu 04 Dec 2025 14:55:54 +0000 Manifest next update: Mon 08 Dec 2025 01:15:54 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: 24qw5vExnPOQqStpvehoaiqOOeLO6pudMX9cy/Pl53A=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3e:85:d9:dc:c6:00:5b:ef:92:10:13:4e:a2:92:d1:81:69:2a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Dec 4 14:55:54 2025 GMT Not After : Dec 8 01:15:54 2025 GMT Subject: CN=25A8E43EDC00A91B145BDE581EDCDD86F16C539F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c9:53:e1:ee:7d:b7:a0:30:3f:90:8e:db:f8: 8f:63:1f:e5:1e:ff:ab:8d:dc:df:dd:19:49:22:36: 05:0e:10:8b:50:df:a4:2e:d4:4d:04:c2:ec:a6:80: 98:70:2d:78:94:60:88:5f:bd:a1:bc:48:c2:0f:80: 30:6c:57:de:a6:76:93:bb:22:fa:3a:59:ad:52:f9: 96:c5:d6:e3:d2:d6:24:a4:84:c8:3d:28:80:1a:0a: 85:8d:a5:43:d3:48:5d:37:36:d8:36:08:91:4b:2e: a2:73:23:cc:d0:a0:2b:92:81:e0:bb:89:f7:f7:88: ea:73:43:d1:d8:51:bb:d5:51:ba:9e:cf:9f:02:6c: 34:a1:60:10:b5:98:3e:bc:56:ca:fe:63:83:5e:30: cd:18:6e:21:d1:ba:90:a2:ba:4e:ad:7e:6f:97:09: 88:04:83:f9:cf:c4:f9:7a:0e:b7:0f:19:9c:cb:eb: 20:f8:97:e1:3f:b7:06:7c:72:15:b6:60:39:f2:ef: c8:2d:32:94:05:08:60:bc:e7:64:29:64:f9:a2:c3: 90:cc:d0:04:da:84:41:f7:51:86:5d:6c:50:d1:47: 3b:97:d8:0e:22:ef:4c:fb:63:8e:03:9e:21:eb:a8: d8:91:cf:d9:4d:2e:48:bc:ba:86:64:f8:24:91:ae: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A8:E4:3E:DC:00:A9:1B:14:5B:DE:58:1E:DC:DD:86:F1:6C:53:9F X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:69:7c:0e:91:c2:58:32:77:7c:bc:93:a4:53:f9:7d:cc:94: 78:ab:2f:e4:ca:35:8c:92:d4:e0:cd:0a:d4:f9:52:38:8e:8e: 68:a9:90:40:14:f0:69:55:0d:5e:b4:ce:33:8f:9f:59:20:a6: 63:d2:e1:a8:e3:49:e4:ed:f0:72:49:9e:f9:4e:9c:b0:19:8f: 37:9d:68:b6:9c:2f:d6:00:8b:7a:39:ef:28:dd:f2:12:d3:63: c9:bc:10:fc:e1:a5:05:d7:de:e2:a8:6d:92:4e:95:93:bf:a0: af:0e:a1:65:71:3d:49:0e:b6:7f:3e:97:33:08:5e:8e:2f:7f: 0c:66:6b:26:95:c8:00:17:99:62:38:8d:98:48:c3:05:58:cf: 51:4d:14:ca:7e:5a:b4:43:2e:ce:7a:05:fb:f3:cb:83:11:10: 84:89:31:42:0a:e2:41:b5:0a:6b:ed:9a:62:49:7f:6e:a8:33: e1:fa:3e:5b:ec:67:45:74:87:d2:83:ae:c0:0f:bf:3d:28:e3: 82:29:47:0f:98:fa:89:30:ca:5a:d3:19:71:0b:13:2d:a7:3b: bf:02:6c:f5:a8:87:04:cd:1b:e9:2d:a9:75:5e:d8:7a:1f:48: 4a:54:5f:b9:3c:fb:65:e5:57:1b:19:d6:7e:0d:52:d9:84:a5: d5:9b:2d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCz6F2dzGAFvvkhATTqKS0YFpKgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTEyMDQxNDU1NTRaFw0yNTEyMDgwMTE1NTRaMDMxMTAvBgNV BAMTKDI1QThFNDNFREMwMEE5MUIxNDVCREU1ODFFRENERDg2RjE2QzUzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1yVPh7n23oDA/kI7b+I9jH+Ue /6uN3N/dGUkiNgUOEItQ36Qu1E0EwuymgJhwLXiUYIhfvaG8SMIPgDBsV96mdpO7 Ivo6Wa1S+ZbF1uPS1iSkhMg9KIAaCoWNpUPTSF03Ntg2CJFLLqJzI8zQoCuSgeC7 iff3iOpzQ9HYUbvVUbqez58CbDShYBC1mD68Vsr+Y4NeMM0YbiHRupCiuk6tfm+X CYgEg/nPxPl6DrcPGZzL6yD4l+E/twZ8chW2YDny78gtMpQFCGC852QpZPmiw5DM 0ATahEH3UYZdbFDRRzuX2A4i70z7Y44DniHrqNiRz9lNLki8uoZk+CSRrscvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJajkPtwAqRsUW95YHtzdhvFsU58wHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRpfA6Rwlgyd3y8k6RT+X3MlHirL+TKNYyS 1ODNCtT5UjiOjmipkEAU8GlVDV60zjOPn1kgpmPS4ajjSeTt8HJJnvlOnLAZjzed aLacL9YAi3o57yjd8hLTY8m8EPzhpQXX3uKobZJOlZO/oK8OoWVxPUkOtn8+lzMI Xo4vfwxmayaVyAAXmWI4jZhIwwVYz1FNFMp+WrRDLs56Bfvzy4MREISJMUIK4kG1 CmvtmmJJf26oM+H6PlvsZ0V0h9KDrsAPvz0o44IpRw+Y+okwylrTGXELEy2nO78C bPWohwTNG+ktqXVe2HofSEpUX7k8+2XlVxsZ1n4NUtmEpdWbLVE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:55 2025 by rpki-client